IT Security Analyst

DXC Luxoft; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Luxoft is seeking a Senior Security Architect to support ESRO's Cybersecurity Transformation Program. You will design and govern vulnerability exposure management and external attack surface security capabilities to reduce risk across complex enterprise environments.

Responsibilities include assessing risks on internet-facing infrastructure, cloud services, DNS, SMTP, TLS, and SaaS, and coordinating with senior stakeholders using enterprise-approved AI tools for security operations.

Qualifications

• 8+ years of experience in security architecture, enterprise security, or platform security roles.
• Design or oversee Vulnerability Exposure Management and external exposure programs.
• Experience with internet-facing infrastructure, cloud services, DNS, SMTP, TLS, and SaaS exposure.
• Familiarity with threat intelligence, dark web monitoring, and external vulnerability scanning.

Responsibilities

• Design and oversee enterprise Vulnerability Exposure Management and external attack surface security programs.
• Assess security risks across internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, and SaaS environments.
• Evaluate threat intelligence, dark web monitoring, and external vulnerability scanning capabilities to identify exposures.

Skills

Security Architecture

Vulnerability Exposure Management

External Attack Surface Management

Enterprise Security

Cloud Security

DNS / SMTP / TLS

SaaS Security

Threat Intelligence

Dark Web Monitoring

Vulnerability Scanning

Email Security

Proofpoint

Security Risk Management

Stakeholder Management

Education

Associate's degree in Computer Science, Information Security, Engineering, or equivalent practical experience

Tools

Proofpoint

Bright

Xpanse

Tenable

Splunk

Job description

Project description

Join Our Team: Innovating Health Care with Cutting-Edge TechnologyWe are looking for an experienced Senior Security Architect to support ESRO's Cybersecurity Transformation Program. The role focuses on designing and governing enterprise Vulnerability Exposure Management and external attack surface security capabilities, strengthening visibility into internet-facing assets, identifying emerging threats, and driving security risk reduction across complex enterprise environments.

Responsibilities

• Design and oversee enterprise Vulnerability Exposure Management and external attack surface security programs.Assess security risks across internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, and SaaS environments.Evaluate threat intelligence, dark web monitoring, and external vulnerability scanning capabilities to identify emerging exposures.Drive security architecture decisions, risk prioritization, and cross-functional initiatives across enterprise teams.Establish security standards, communicate risks to executive stakeholders, and leverage enterprise-approved AI tools to improve security operations and decision-making.

SKILLS

Must have

• Mandatory Skills:- Security Architecture- Vulnerability Exposure Management- External Attack Surface Management- Enterprise Security- Cloud Security- DNS / SMTP / TLS- SaaS Security- Threat Intelligence- Dark Web Monitoring- Vulnerability Scanning- Email Security- Proofpoint- Security Risk Management- Stakeholder ManagementMandatory Skills Description8+ years of experience in security architecture, enterprise security, or platform security roles. Proven experience designing or overseeing Vulnerability Exposure Management and external exposure programs. Strong understanding of internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, SaaS exposure, threat actor reconnaissance, exploitation techniques, dark web monitoring, threat intelligence, and external vulnerability scanning. Knowledge of email security platforms including Proofpoint is required. Demonstrated ability to operate in ambiguous environments, influence cross-functional teams, and communicate complex security concepts to technical and executive audiences. Associate's degree in Computer Science, Information Security, Engineering, or equivalent practical experience required.Experience within healthcare or other highly regulated industries. Hands-on or architectural expertise with Proofpoint, Bright, Xpanse, Tenable, and Splunk or similar SIEM platforms. Familiarity with HIPAA, NIST, ISO, and SOC compliance frameworks. Experience influencing enterprise security platforms, advising executive stakeholders on risk visibility and prioritization, and mentoring security engineering or architecture teams.Experience with enterprise-approved AI tools, including GitHub Copilot, Microsoft 365 Copilot, and other GenAI platforms, is expected, with a minimum of 90% weekly usage to support productivity, documentation, analysis, and continuous improvement.

Nice to have

Exceptional communication skills.Ability to deliver exceptional customer service with a positive attitude.